Date: Sun, 16 Aug 2015 16:51:33 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-bugs@FreeBSD.org Subject: [Bug 202365] [patch] [geli] Consider improving PBKDF2 performance Message-ID: <bug-202365-8@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=202365 Bug ID: 202365 Summary: [patch] [geli] Consider improving PBKDF2 performance Product: Base System Version: 11.0-CURRENT Hardware: Any OS: Any Status: New Keywords: patch Severity: Affects Some People Priority: --- Component: kern Assignee: freebsd-bugs@FreeBSD.org Reporter: jpixton@gmail.com Keywords: patch Created attachment 159924 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=159924&action=edit proposed patch The PBKDF2 in sys/geom/eli/pkcs5v2.c is around half the speed than it could be. I have some background on this issue on my blog[1]. I've attached a patch which does the minimum needed changes. This processes the HMAC key (in PBKDF2, the password) once, and then uses this as a starting point for all the subsequent computations. - For existing volumes, this should roughly double the mounting speed (measured as 51% of previous on my machine). - For new volumes it should approximately double the security margin (measured as 196% of previous on my machine). Cheers, Joe [1]: https://jbp.io/2015/08/11/pbkdf2-performance-matters/ -- You are receiving this mail because: You are the assignee for the bug.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-202365-8>